System and method for personal identification based on multimodal biometric information

ABSTRACT

Methods, systems, and programming for identifying a person are presented. In one example, a first set of candidates is determined based on a fingerprint image acquired from a finger of the person. A second set of candidates is determined based on a finger vein image acquired from the finger. The person is recognized based on the first and/or second set of candidates.

CROSS-REFERENCE TO RELATED APPLICATION

The present application is a continuation of U.S. patent applicationSer. No. 14/906,963 filed Jan. 22, 2016, which is a national stageapplication, filed under 35 U.S.C. § 371, of International ApplicationPCT/CN2014/092704, filed on Dec. 1, 2014, which are incorporated hereinby reference in their entireties. The present application is related toPCT Application No. PCT/CN2014/092700, filed on Dec. 1, 2014, entitled“SYSTEM AND METHOD FOR ACQUIRING MULTIMODAL BIOMETRIC INFORMATION”,which is incorporated herein by reference in its entirety.

BACKGROUND 1. Technical Field

The present disclosure relates to user/person identification;particularly, user/person identification based on multimodal biometricinformation.

2. Technical Background

Biometric information has been widely used for user identification andverification/authentication. Most conventional techniques focus on useridentification/verification based on uni-modal biometric information,i.e., a single type of biometric information. For example, afingerprint-based user identification device can identify a person basedon fingerprint characteristics of a finger of the person. However, suchsystems may not be reliable for various reasons. For instance, thefingerprint-based user identification may have false rejections when thefinger is moist, wet, or dirty. However, latent fingerprint acquired inreal operational environment, moist, wet, dry, or dirty fingers arefairly common. In addition, the fingerprint-based user identificationmay also have false acceptances when, e.g., a finger is forged. In suchsituations, the reliability issues associated with a biometricinformation based authentication may lead to security issues.

Therefore, there is a need to provide a biometric information basedidentification/verification solution with improved reliability.

SUMMARY

The present teaching relates to methods, systems, and programming foruser identification. Particularly, the present teaching is directed tomethods, systems, and programming for user/person identification basedon multimodal biometric information.

In one example, a system for recognizing a person is disclosed. Thesystem comprises a first recognition portion, a second recognitionportion, and an identity determiner. The first recognition portion isconfigured for determining a first set of candidates based on afingerprint image acquired from a finger of the person. The secondrecognition portion is configured for determining a second set ofcandidates based on a finger vein image acquired from the finger. Theidentity determiner is configured for recognizing the person based onthe first and/or second set of candidates.

In another example, a method for recognizing a person is disclosed. Afirst set of candidates is determined based on a fingerprint imageacquired from a finger of the person. A second set of candidates isdetermined based on a finger vein image acquired from the finger. Theperson is recognized based on the first and/or second set of candidates.

In yet another example, a method for identifying a person is disclosed.A finger vein image acquired from the person is received. Acharacteristic finger vein image is generated based on the finger veinimage. The characteristic finger vein image is compared with each of aplurality of candidate characteristic finger vein images stored in adatabase so that each of the candidate characteristic finger vein imagesis associated with a confidence score. One or more matching candidatesare selected based on the confidence scores associated therewith. Theperson is identified based on the confidence score of each of the one ormore candidates.

BRIEF DESCRIPTION OF THE DRAWINGS

The methods, systems, and/or programming described herein are furtherdescribed in terms of exemplary embodiments. These exemplary embodimentsare described in detail with reference to the drawings. Theseembodiments are non-limiting exemplary embodiments, in which likereference numerals represent similar structures throughout the severalviews of the drawings, and wherein:

FIG. 1A illustrates a side view of a portion of an exemplary product,according to an embodiment of the present teaching;

FIG. 1B illustrates a prospective view of a portion of an exemplaryproduct, according to an embodiment of the present teaching; FIG. 1Cillustrates a sectional view of a portion of an exemplary product,according to an embodiment of the present teaching;

FIG. 2A illustrates a stereoscopic view of an exemplary product,according to an embodiment of the present teaching;

FIG. 2B illustrates another stereoscopic view of an exemplary product,according to an embodiment of the present teaching;

FIG. 3 is a high level depiction of an exemplary system for useridentification, according to an embodiment of the present teaching;

FIG. 4 is a high level depiction of another exemplary system for useridentification, according to an embodiment of the present teaching;

FIG. 5 illustrates an exemplary diagram of anidentification/verification module in a system for user identification,according to an embodiment of the present teaching;

FIG. 6 is a flowchart of an exemplary process for user identification,according to an embodiment of the present teaching;

FIG. 7 is a flowchart of an exemplary process for biometric informationrecording, according to an embodiment of the present teaching;

FIG. 8 illustrates an exemplary diagram of anidentification/verification controller and a server-basedidentification/verification module, according to an embodiment of thepresent teaching;

FIG. 9 illustrates an exemplary diagram of a fingerprint imageprocessing unit in a system for user identification, according to anembodiment of the present teaching;

FIG. 10 is a flowchart of an exemplary process performed by afingerprint image processing unit, according to an embodiment of thepresent teaching;

FIG. 11 illustrates an exemplary diagram of a finger vein imageprocessing unit in a system for user identification, according to anembodiment of the present teaching;

FIG. 12 is a flowchart of an exemplary process performed by a fingervein image processing unit, according to an embodiment of the presentteaching;

FIG. 13 illustrates a process for comparing two finger vein images foruser identification, according to an embodiment of the present teaching;

FIG. 14 illustrates an exemplary diagram of anidentification/verification unit in a system for user identification,according to an embodiment of the present teaching;

FIG. 15A is a flowchart of an exemplary process performed by anidentification/verification unit, according to an embodiment of thepresent teaching;

FIG. 15B is a flowchart of another exemplary process performed by anidentification/verification unit, according to another embodiment of thepresent teaching;

FIG. 16 depicts a general mobile device architecture on which thepresent teaching can be implemented;

FIG. 17 depicts a general computer architecture on which the presentteaching can be implemented; and

FIG. 18 depicts an exemplary manner in which the present teaching can beimplemented on a general computer.

DETAILED DESCRIPTION

In the following detailed description, numerous specific details are setforth by way of examples in order to provide a thorough understanding ofthe relevant teachings. However, it should be apparent to those skilledin the art that the present teachings may be practiced without suchdetails or in conjunction with additional features. In other instances,well known methods, procedures, systems, components, and/or circuitryhave been described at a relatively high-level, without detail, in orderto avoid unnecessarily obscuring aspects of the present teachings.

The present disclosure describes method, system, and programming aspectsof acquiring multimodal biometric information and identifying a personbased on the multimodal biometric information. The multimodal biometricinformation of a person may include, but not limited to, informationrelating to a fingerprint of a finger of the person and informationrelating to a finger vein of the finger. Applications of such useridentification include secure access, e.g., to a building, a device, asoftware application installed on a computing device, etc. For example,when a person tries to enter a building through a door controlled by asecurity system (that is, e.g., installed on or in the vicinity of thedoor), the security system may inform the person to place a finger ontoa user-identification device. The user-identification device candetermine whether the person has a known and/or authorized identity tobe allowed to enter the building.

After the person places a finger on a surface of the device, a detectoron the device can detect the finger and thus trigger two (or more) lightsources on the device to emit lights onto the finger. For example, afirst light source emits a first light to the finger. The first light isreflected by a fingerprint portion of the finger and projected onto afirst sensor. The first sensor may generate a fingerprint image thatcaptures biometric information relating to the fingerprint of the fingerwith the first light.

Additionally, a second light source may include two opposing lightemitting units residing on two opposing sides of the finger when theperson places the finger on the surface. After detection of the finger,each light emitting unit emits a second light to the finger so that afinger vein of the finger is exposed to the second light and madevisible to a second sensor. The second sensor may generate a finger veinimage that captures biometric information relating to the finger vein ofthe finger with the second light.

The finger vein image and the fingerprint image may be processed andmatched separately. For example, features including minutiae areextracted from the fingerprint image. A fingerprint template isgenerated based on such extracted features. The fingerprint template isthen matched against fingerprint templates pre-stored in a database. Thedatabase may include identities of persons (name, employee number, etc.)that are known to have access to the building. Corresponding to eachknown identity, the database includes pre-known fingerprint template andpre-known finger vein image (and other information) associated with thatidentity.

The finger vein image generated by the second sensor may also beprocessed before being matched against finger vein images in thedatabase. In some embodiments of the present disclosure, a region in thefinger vein image is segmented where the vein is present in the image.Further, geometric features of the finger vein image may be normalizedto have a normalized shape, size, and direction of the image. The graylevel of the finger vein image may also be normalized. Blood vessels inthe normalized finger vein image may be identified. In addition, noisemay be removed from the finger vein image and the finger vein image maybe compressed. Such characteristic finger vein image is matched againstcandidate finger vein images pre-stored in the database.

In one scenario, the person's identity can be determined if both thecharacteristic finger vein image matches a finger vein image associatedwith a known identity and the fingerprint template matches a fingerprinttemplate associated with the same known identity. In another scenario,the person can be identified if either the characteristic finger veinimage matches a finger vein image associated with a known identity orthe fingerprint template matches a fingerprint template associated witha known identity. Based on the determined identity of the person, theperson may be allowed or denied to enter the building.

Additional novel features will be set forth in part in the descriptionwhich follows, and in part will become apparent to those skilled in theart upon examination of the following and the accompanying drawings ormay be learned by production or operation of the examples. The novelfeatures of the present teachings may be realized and attained bypractice or use of various aspects of the methodologies,instrumentalities and combinations set forth in the detailed examplesdiscussed below.

FIG. 1A illustrates a side view of a portion of an exemplary product,according to an embodiment of the present teaching. FIG. 1B illustratesa prospective view of a portion of the exemplary product, according toan embodiment of the present teaching. As shown in FIG. 1A, a person mayplace a finger 150 onto a surface 130 of the exemplary product.Underneath the surface 130, there is a detector configured to detect thefinger 150 once the finger 150 is fully or at least partially placedonto the surface 130. In this example, the detector includes twodetecting units 102, 103. Each detecting unit may be a capacitancesensor. A first detecting unit 102 is configured to detect a firstportion of the finger 150, e.g., a finger portion close to fingertip;while a second detecting unit 103 is configured to detect a secondportion of the finger 150, e.g., that is close to finger root. In oneembodiment, the finger 150 is detected when one of the first and secondportions is detected. In another embodiment, the finger 150 is detectedwhen both the first and second portions are detected.

After the finger 150 is detected, the product generates a signal thatcan trigger a first light source 111 and a second light source 121 togenerate lights. The first light source 111 in this example includes anLED (light-emitting diode) lamp bead for fingerprint informationcollection. The second light source 121 in this example includes two(parallel and) opposing light plates as shown in FIG. 1B for finger veininformation collection. In operation, when the finger 150 is placed ontothe surface 130, the two light plates 121 would reside on two opposingsides of the finger 150.

Once triggered, the LED lamp bead 111 generates a first light beampropagating through a prism 112 and towards the fingerprint portion ofthe finger 150 to enable an acquisition of a fingerprint image of thefinger 150. The first light beam is reflected at the surface 130 topropagate towards a magnifying lens 113. The first light beam is thenmagnified by the magnifying lens 113, reflected by a reflective mirror114, minified by a small lens 115, and finally projected onto a firstsensor 116. The first sensor 116 in this example is a CMOS(complementary metal-oxide-semiconductor) sensor that can sense lightreflected by the fingerprint portion. The first sensor 116 may transformthe sensed light at each picture location into electrical signal(s)representing a gray scale value at different locations of the picture. Afingerprint image 141 of the finger 150 is thus collected.

In one embodiment, at the same time as the LED lamp bead 111 beingtriggered, the two light plates 121, residing face to face on twoopposing sides of the finger 150, are also triggered to generate twoopposing light beams towards the finger 150. In another embodiment, thetwo light plates 121 are triggered to generate two opposing light beamsbefore or after the LED lamp bead 111 is triggered. But in eitherembodiment, the finger 150 does not have to be placed onto the surface130 more than once to collect fingerprint and finger vein information.

In this example, the two light beams are two infrared light beams thatcan traverse through the finger 150 so that blood vessels of the vein ofthe finger 150 are visible (i.e., exposed to) the infrared light beamsand can be captured by a second sensor 124. Light from the visible veinis projected through a dustproof flat glass 122 and a lens group 123,and then projected onto the second sensor 124. The second sensor 124 inthis example is another CMOS sensor that can sense light from thevisible or exposed vein in the finger 150. The second sensor 124 mayalso transform the sensed light at each picture location into electricalsignal(s) representing a gray scale value at different locations of thepicture. A finger vein image 142 of the finger 150 is thus collected.

It can be understood by one skilled in the art that the first and secondlight sources may be used as sources of radiations or “lights” of anyfrequencies or wavelengths, in accordance with various embodiments ofthis disclosure. Further, in the present teaching, the term “light” hasa general meaning that includes an electromagnetic radiation with anywavelength as well as a radiation of energy in the form of rays or wavesor particles. For example, the second light source may emit x-ray sothat an image of bones in the finger may be obtained for useridentification, in accordance with one embodiment of the presentteaching.

FIG. 2A illustrates a stereoscopic view of an exemplary product,according to an embodiment of the present teaching. FIG. 2B illustratesanother stereoscopic view of the exemplary product, according to anembodiment of the present teaching. As shown in FIG. 2A, the product mayinclude a groove 204 on the top surface of the product, so that a fingercan be placed onto the groove 204 for fingerprint and finger vein datacollections. A cover 202 may be included in the product so that somelight scattered from the finger can be reflected back to the finger. Thecover 202 is optional in the present teaching. In one embodiment, theproduct does not have the cover 202. As shown in FIG. 2B, on the backside of the product, there is a plate 220 that can be mounted to a wall,a door, or connected to another device for user identification andauthorization.

FIG. 3 is a high level depiction of an exemplary system 300 for useridentification and authorization, according to an embodiment of thepresent teaching. In FIG. 3, the exemplary system 300 includes a server330, an identity recognition device 340, one or more authorizationcontrollers 310, a user 350, and a network 320. The network 320 may be asingle network or a combination of different networks. For example, thenetwork 320 may be a local area network (LAN), a wide area network(WAN), a public network, a private network, a proprietary network, aPublic Telephone Switched Network (PSTN), the Internet, a wirelessnetwork, a virtual network, or any combination thereof. The network 320may also include various network access points, e.g., wired or wirelessaccess points such as base stations or Internet exchange points 320-1 .. . 320-2, through which an authorization controller 310 may connect tothe network 320 in order to obtain authorization information via thenetwork 320.

Authorization controllers 310 may be of different types such asauthorization controllers connected to a door 310-1, a car 310-2, alaptop computer 310-3, or a mobile device 310-4. A user 350 may want toaccess a building through a door, access a car, or access data in alaptop or a mobile device. In each case, the user 350 has to obtainaccess authorization from a corresponding authorization controller 310.The access authorization may be obtained by a user identificationprocess performed at the identity recognition device 340 that isconnected to the authorization controllers 310, e.g., directly or asshown, via the network 320.

The identity recognition device 340 may include the portion of a productdescribed according to FIG. 1A and FIG. 1B. The identity recognitiondevice 340 can acquire biometric information about a fingerprint and afinger vein from a same finger of the user 350. Based on the acquiredbiometric information, the identity recognition device 340 identifiesthe user 350 either by itself or with the help of the server 330.

In one embodiment, the identity recognition device 340 identifies theuser 350 by communicating with the server 330 via the network 320. Thismay be applicable in a case where a user wants to enter a buildingassociated with a company that has hundreds or thousands of employeesand many office buildings. In this case, user or employee data used foridentifying and authorizing access may be relatively large and changevery frequently. Thus, it may not be practical to have such vast dataprovided at each office building location. As such, user/employee dataneeded for identity recognition and authorization may be stored in acommon server 330 and be accessible to many identity recognition devices340 associated with the different office locations. For example, afteran identity recognition device 340 captures and generates a fingerprintimage and a finger vein image from a finger of the user 350, theidentity recognition device 340 may send the images to the server 330via the network 320. The server 330 may compare the fingerprint imageand the finger vein image with images in a database implemented at theserver 330. The server 330 may then send an outcome of the imagecomparison back to the identity recognition device 340 for useridentification or directly to the authorization controller 310 for userauthorization.

In one embodiment, the identity recognition device 340 captures andgenerates only a finger vein image from a finger of the user 350. Afterthe identity recognition device 340 sends the image to the server 330via the network 320, the server 330 may compare the finger vein imagewith images in a database implemented at the server 330. The server 330may then send an outcome of the image comparison back to the identityrecognition device 340 for user identification or directly to theauthorization controller 310 for user authorization.

FIG. 4 is a high level depiction of another exemplary system 400 foruser identification and authorization, according to an embodiment of thepresent teaching. The exemplary system 400 in this embodiment includesan authorization controller 410, the identity recognition device 440,and a user 450. In this example, the user 450 wants to enter a buildingthrough a door which is controlled by the authorization controller 410.The identity recognition device 440 in this example is located near thedoor and can directly communicate with the authorization controller 410without a network.

In this embodiment, the identity recognition device 440 may have theinherent capability to identify the user 450. This may be applicable ina case where a user wants to enter a specific building (e.g., a privateresidence) associated with a small group of people. In this case, useror employee data used for identifying and authorizing access may berelatively small and static, and the user identification process may notneed many resources. As such, the database with user information may beimplemented or provided locally at the identity recognition device 440.For example, after an identity recognition device 440 generates afingerprint image and a finger vein image from a finger of the user 450,the identity recognition device 440 may compare the fingerprint imageand the finger vein image with images in the local database to obtainmatching results for user identification. Based on the comparisonresults, the identity recognition device 440 can determine whether theuser 450 has an authorization, and send the authorization information tothe authorization controller 410 for authorizing access or denyingaccess.

FIG. 5 illustrates an exemplary diagram of anidentification/verification module 500 in a system for useridentification, according to an embodiment of the present teaching. Theidentification/verification module 500 may be located in the identityrecognition device 440 shown in FIG. 4. The identification/verificationmodule 500 in this example includes a controller 502, afingerprint-related light configuration unit 512, a finger vein-relatedlight configuration unit 514, a fingerprint image processing unit 522, afinger vein image processing unit 524, a communication unit 504, amode-based controller 506, an identity association unit 508, a databasemanager 510, and an identification/verification unit 520.

The controller 502 in this example receives information from thedetector, i.e., the two detecting units 102, 103. If a finger isdetected, the controller 502 will initiate the fingerprint-related lightconfiguration unit 512 and the finger vein-related light configurationunit 514 to configure the first light source 111 and the second lightsource 121, respectively. For example, the fingerprint-related lightconfiguration unit 512 may configure the first light source 111 to emitlight with wavelengths, e.g., in the zone of visible lights so that thelight emitted from the first light source 111 can be reflected by thefinger. The finger vein-related light configuration unit 514 mayconfigure the second light source 121 to emit infrared light that cantransmit through the finger. In one example, the first light source 111and the second light source 121 can emit lights with a same wavelength.

In one embodiment, the controller 502 also controls the first sensor 116and the second sensor 124 to sense the light and collect images. Inanother embodiment, the first sensor 116 and the second sensor 124 cansense the light and collect images automatically without control fromthe controller 502. In either embodiment, the first sensor 116 willgenerate a fingerprint image and send it to the fingerprint imageprocessing unit 522 for processing, and the second sensor 124 willgenerate a finger vein image and send it to the finger vein imageprocessing unit 524 for processing.

The fingerprint image processing unit 522 in this example receives thefingerprint image from the first sensor 116 and processes thefingerprint image to generate a fingerprint template. The process of thefingerprint image includes at least extracting features includingminutiae from the fingerprint image, and generating the fingerprinttemplate based on the extracted features.

The finger vein image processing unit 524 in this example receives thefinger vein image from the second sensor 124 and processes the fingervein image to generate a characteristic finger vein image. A region inthe finger vein image where the vein is present in the image issegmented. Further, geometric features of the finger vein image may benormalized to have a normalized shape, size, and direction of the image.The gray level of the finger vein image may also be normalized. Bloodvessels in the normalized finger vein image may be identified. Inaddition, noise is removed from the finger vein image and the fingervein image may be compressed.

The communication unit 504 in this example communicates with theauthorization controller 410. When a user tries to have an accesscontrolled by the authorization controller 410, the authorizationcontroller 410 may send a user identification request to theidentification/verification module 500 via the communication unit 504.In another situation, when the system needs to collect biometricinformation from a user known or determined to have an access controlledby the authorization controller 410, the authorization controller 410may send a biometric recording request to theidentification/verification module 500 via the communication unit 504.

The mode-based controller 506 in this example receives the fingerprinttemplate from the fingerprint image processing unit 522, receives thecharacteristic finger vein image from the finger vein image processingunit 524, and determines a work or operation mode for theidentification/verification module 500 based on the request receivedfrom the authorization controller 410 via the communication unit 504. Inone example, if the request received from the authorization controller410 is a “user identification” request, the mode-based controller 506will determine a work or operation mode to be directed to useridentification. In this mode, the user's identity is unknown and needsto be determined based on the fingerprint template and thecharacteristic finger vein image. The mode-based controller 506 may thenforward the fingerprint template and the characteristic finger veinimage to the identification/verification unit 520 for useridentification or verification.

In another example, if the request received from the authorizationcontroller 410 is a “biometric recording” request, the mode-basedcontroller 506 will determine a work or operation mode to be directed tobiometric recording. In this mode, the user's identity is known but theuser's biometric information, e.g., the information included in thefingerprint template and the characteristic finger vein image needs tobe recorded. The mode-based controller 506 may then forward thefingerprint template and the characteristic finger vein image to theidentity association unit 508 for recording the biometric information.

The identity association unit 508 in this example associates an identitywith a template or an image. For example, a user's identity (e.g., name,employee number, etc.) is known and the authorization controller 410requests to record the user's fingerprint and finger vein information.In this example, the identity association unit 508 receives thefingerprint template and the characteristic finger vein image from themode-based controller 506, and associates them with the user's identitythat is provided in the request from the authorization controller 410.

The database manager 510 in this example receives the fingerprinttemplate and the characteristic finger vein image associated with theuser's identity from the identity association unit 508, and saves themin a biometric database 550 located in the identification/verificationmodule 500. The biometric database 550 in this example includesbiometric information associated with respective user identities. Thebiometric information includes at least information from fingerprinttemplates and finger vein images. The fingerprint templates and fingervein images are stored in pairs in the biometric database 550, whereeach pair corresponds to an identity. To that end, each entry in thebiometric database includes identity associated with a correspondingfinger vein image and a corresponding fingerprint template that weregenerated from a same finger of the user having that identity. In oneembodiment, the database manager 510 may update some biometricinformation in the biometric database 550, when new biometricinformation from a clearer (i.e., better resolution) image associatedwith an existing identity is available. After the database manager 510saves or updates the biometric information, it may send a response tothe authorization controller 410 via the communication unit 504 toinform that the biometric information has been recorded and/or updated.

It can be understood that in some embodiments, the fingerprint templatesare stored in one database while the finger vein images are stored inanother database.

The identification/verification unit 520 in this example identifies orverifies a person based on the fingerprint template and thecharacteristic finger vein image received from the mode-based controller506. In one example, when a user wants to enter a building controlled bythe authorization controller 410, he/she directly places a finger onto asurface of the device including the identification/verification module500 without providing other information regarding his/her identity. Theidentification/verification unit 520 will then identify the user basedon the fingerprint template and the characteristic finger vein image. Inanother example, when a user wants to enter a building controlled by theauthorization controller 410, he/she places a finger onto the deviceincluding the identification/verification module 500 after providingother information regarding his/her identity, e.g., a username input bythe user or identity information in a badge scanned by the user. Theidentification/verification unit 520 will then verify whether the useris indeed associated with the username, based on the fingerprinttemplate and the characteristic finger vein image.

When the identification/verification unit 520 needs to identify a user,the identification/verification unit 520 compares the fingerprinttemplate and the characteristic finger vein image received from themode-based controller 506 with finger templates and finger vein imagesstored in the biometric database 550, respectively. Since there is noother information regarding the user's identity, the order of thecomparisons can be determined based on a frequency of access associatedwith each identity. For example, if a first identity in the biometricdatabase 550 has more frequent access than a second identity in thebiometric database 550, the first identity should be checked before thesecond identity. Accordingly, the fingerprint template and thecharacteristic finger vein image are compared with those associated withthe first identity before being compared with those associated with thesecond identity. The comparison result can be determined based on acertain threshold related to a confidence score. An identity isdetermined when the confidence score is greater than the threshold. Theconfidence score can be any real number or percentage numberrepresenting a degree of matching between two templates or two images.

In one embodiment, the identification/verification unit 520 mayrecognize a person only based on the characteristic finger vein imagereceived from the mode-based controller 506. In that case, there is noneed to collect fingerprint from the finger.

After identifying the user, the identification/verification unit 520 maysend a response to the authorization controller 410 via thecommunication unit 504 to inform the identity of the user and whetherthe user should be authorized. In one embodiment, theidentification/verification unit 520 merely informs the authorizationcontroller 410 with the identity of the user and a correspondingconfidence score; while the authorization controller will determineitself whether the user should be authorized.

When the identification/verification unit 520 needs to verify a user,the identification/verification unit 520 compares the fingerprinttemplate and the characteristic finger vein image received from themode-based controller 506 with a finger template and a finger vein imageassociated with the user-provide identity, e.g. the username, in thebiometric database 550 respectively. The comparison result can bedetermined based on a threshold related to a confidence score. Theidentity is verified when the confidence score is larger than thethreshold. The confidence score can be any real number or percentagenumber representing a degree of matching between two templates or twoimages. After verifying the user, the identification/verification unit520 may send a response to the authorization controller 410 via thecommunication unit 504 to inform the identity of the user is verifiedand whether the user should be authorized.

FIG. 6 is a flowchart of an exemplary process for user identification,according to an embodiment of the present teaching. In one example, theexemplary process in FIG. 6 may be performed by an exemplary deviceincluding the identification/verification module 500 shown in FIG. 5when a user identification request is received from the authorizationcontroller 410. Starting at 602, a finger is detected to be placed on asurface of the device. The process is then divided into two branches,where the two branches are performed separately.

The first branch is for fingerprint collection and processing. At 610, afirst light source is configured for fingerprint collection. At 612, afirst light beam is generated by the first light source according to theconfiguration. At 614, the first light beam is reflected by afingerprint portion of the finger and is sensed by a first sensor. At616, a fingerprint image is obtained based on the sensed light. At 618,the fingerprint image is processed to generate a fingerprint template.The first branch then merges to 630.

The second branch is for finger vein collection and processing. At 620,a second light source is configured for finger vein collection. At 622,a second light beam is generated by the second light source according tothe configuration. At 624, the second light beam is scattered by thefinger vein and is sensed by a second sensor. At 626, a finger veinimage is obtained based on the sensed light. At 628, the finger veinimage is processed to generate a characteristic finger vein image. Thesecond branch then merges to 630.

At 630, an identity associated with the finger is determined. In anotherexample not shown, at 630, an identity associated with the finger isverified based on a user-provided identity. The identity may bedetermined at 630 based on the processed fingerprint image, theprocessed finger vein image, or both. At 632, a response regarding thedetermined identity is transmitted, e.g. to an authorization controllerwho is interested in the identity of the person.

FIG. 7 is a flowchart of an exemplary process for biometric informationrecording, according to an embodiment of the present teaching. In oneexample, the exemplary process in FIG. 7 may be performed by anexemplary device including the identification/verification module 500shown in FIG. 5 when a biometric recording request is received from theauthorization controller 410. Starting at 702, a finger is detected tobe placed on a surface of the device. The process is then divided intotwo branches, where the two branches are performed separately.

The first branch is for fingerprint collection and processing. At 710, afirst light source is configured for fingerprint collection. At 712, afirst light beam is generated by the first light source according to theconfiguration. At 714, the first light beam is reflected by afingerprint portion of the finger and is sensed by a first sensor. At716, a fingerprint image is obtained based on the sensed light. At 718,the fingerprint image is processed to generate a fingerprint template.The first branch then merges to 730.

The second branch is for finger vein collection and processing. At 720,a second light source is configured for finger vein collection. At 722,a second light beam is generated by the second light source according tothe configuration. At 724, the second light beam is scattered by thefinger vein and is sensed by a second sensor. At 726, a finger veinimage is obtained based on the sensed light. At 728, the finger veinimage is processed to generate a characteristic finger vein image. Thesecond branch then merges to 730.

At 730, an identity is associated with the fingerprint and the fingervein, where the identity is a known identity included in the biometricrecording request received from the authorization controller 410. At732, the fingerprint and finger vein associated with the identity aresaved in a database. At 734, a response regarding the saved biometricinformation is transmitted, e.g. to an authorization controller who isinterested in recording biometric information of the person with theknown identity.

FIG. 8 illustrates an exemplary diagram of anidentification/verification controller 800 and a server-basedidentification/verification module 810, according to an embodiment ofthe present teaching. The 800 may be located in the identity recognitiondevice 340 shown in FIG. 3; while the 810 may be located in the server330 in FIG. 3. The components in the 800 and the 810 in this example aresimilar (in terms of their respective configuration and functionality)to the components in the identification/verification module 500 shown inFIG. 5, except that in this example some components from theidentification/verification module 500 are now located in the 800, whileother components from the identification/verification module 500 are nowlocated in the 810. As discussed above, this application happens whenthe 810 is in the server 330 that is shared by a large group of peopleand can serve multiple identity recognition devices 340 associated withthe same group of people, e.g., employees of a same company. In oneembodiment, the application happens when a user wants to obtain accessto a building, a car, a laptop or a mobile device that is shared by thesame group of users in the company.

As shown in FIG. 8, the controller 502, the fingerprint-related lightconfiguration unit 512, the finger vein-related light configuration unit514, the fingerprint image processing unit 522, the finger vein imageprocessing unit 524, and the mode-based controller 506 are located inthe 800. The identity association unit 508, the database manager 510,the identification/verification unit 520, and the biometric database 550are located in the 810. The 800 includes a communication unit 802 thatcan communicate with the 810 via a communication unit 812 in the 810.The 800 and the 810 can communicate with the authorization controllers310 via the communication units 802 and 812, respectively, e.g. throughthe network 320 as shown in FIG. 3.

FIG. 9 illustrates an exemplary diagram of a fingerprint imageprocessing unit 522 in a system for user identification, according to anembodiment of the present teaching. In one embodiment, the fingerprintimage processing unit 522 may be located in theidentification/verification module 500 in FIG. 5. In another embodiment,the fingerprint image processing unit 522 may be located in the 800 inFIG. 8. The fingerprint image processing unit 522 in this exampleincludes a fingerprint image normalizer 902, a feature extractor 904,and a template generator 906.

The fingerprint image normalizer 902 in this example receives thefingerprint image, e.g. from the first sensor 116, and normalizes thefingerprint image. The feature extractor 904 in this example extractsfeatures from the normalized fingerprint image. The features may includeat least one of singular points, average density of the image ridge, andminutiae of the fingerprint image. The features can be extracted basedon one or more feature detection models 905 stored in the fingerprintimage processing unit 522. Each feature detection model defines a mannerin which a feature is detected or verified. As an example, a detailedprocess of extracting features from a fingerprint image is describedbelow.

For image processing of a fingerprint image, the system may usedifferent parameters to represent different features in the fingerprintimage. The fingerprint image can be represented by a two-dimensionalmatrix, with a width W and a height H. Each element of the matrixrepresents a corresponding pixel on the image. A pixel corresponding torow i and column j of the matrix has a gray scale I_(i,j), which may beany number between 0 and 255.

A fingerprint image may include minutiae that are endpoints orbifurcation points on fingerprint ridges. A minutia can be representedby the following parameters (x, y, t, d, g, c). Axes x and y representthe minutia's position in the fingerprint image. Type t indicateswhether the minutia is an endpoint or a bifurcation point. Direction drepresents a direction of the minutia. If the minutia is an endpoint ofa ridge, d represents a direction from the minutia to the ridge. If theminutia is a bifurcation point connecting two divergent ridges, drepresents a direction from the minutia to a middle line of the twodivergent ridges. Ridge density g represents an average density ofridges around the minutia. A larger gap between ridges can lead to asmaller ridge density. Ridge curvature c represents a changing rate ofridge direction d at the minutia.

A fingerprint image can be divided to smaller non-overlapping blocks.Each block has dimensions Size*Size. After calculating an average ridgedirection for each block, the system can achieve a block direction mapwith dimensions (W/Size)*(H/Size). The block direction map illustratesglobal directions of the ridges. The system may store the blockdirection map for future matching. In addition, an unexpected directionvalue in the block direction map can represent a background portion,i.e. there is no fingerprint in this portion or the fingerprint qualityis very poor in this portion.

A fingerprint image may also include some singular points. At a singularpoint, the ridge direction is not continuous. A singular point can berepresented by the following parameters (x, y, t, d, g). Axes x and yrepresent the singular point's position in the fingerprint image. Type tindicates a type of singular points, which may be a core point, a dualcore point, or a triangulation point. Direction d represents a directionsuch that when moving away from the singular point, this direction caninduce a minimum change of ridge direction. Ridge density g representsan average density of ridges around the singular point.

According to the above parameter representations, a fingerprint imagecan be processed as below to generate a fingerprint template. First, thesystem filters the fingerprint image to smooth the image, according tothe following equation:

$\begin{matrix}{R_{i,j} = \frac{\sum\limits_{y = {i - w}}^{i + w}{\sum\limits_{x = {j - w}}^{j + w}I_{y,x}}}{\left( {w + 1} \right)^{2}}} & (1)\end{matrix}$where I_(y,x) represents the original fingerprint image, R_(i,j)represents a filtered fingerprint image, w=1 for a 3*3 filter.

The system may normalize the filtered fingerprint image according to thefollowing equations:

$\begin{matrix}{{R_{i,j}^{N} = \frac{255\left( {I_{i,j} - {Min}_{i,j}} \right)}{\Delta_{i,j}}}{{Min}_{i,j} = {I_{i,j} - {Var}_{i,j}}}{{Max}_{i,j} = {I_{i,j} + {Var}_{i,j}}}{\Delta_{i,j} = {{Max}_{i,j} - {Min}_{i,j}}}{{Var}_{i,j} = \frac{\sum\limits_{y = {i - w}}^{i + w}{\sum\limits_{x = {j - w}}^{j + w}{{I_{y,x} - S_{y,x}}}}}{\left( {w + 1} \right)^{2}}}} & (2)\end{matrix}$where I_(i,j) may equal R_(i,j) in equation (1) above, S_(y,x)represents an image generated by filtering the original fingerprintimage with a 5*5 filter, w is a large number, e.g. 80, for Varcalculation.

The system can detect singular points by calculating Poincare Index foreach point on the block direction map described above. The PoincareIndex for one point is calculated according to the following equations:

${pindex}^{n} = {\frac{1}{\pi}{\sum\limits_{i = 0}^{n}{\tau\left( {O_{{({i + 1})}modn} - O_{i}} \right)}}}$${\tau(k)} = \left\{ {\begin{matrix}{k,{{{if}\mspace{14mu}{k}} < \frac{\pi}{2}},} \\{{\pi + k},{{{if}\mspace{14mu}{k}} < \frac{\pi}{2}}} \\{{\pi - k},{otherwise}}\end{matrix},} \right.$where n represents number of pixels around the point, O_(i) representsdirection of the i-th point. To ensure reliability, the system can firstcalculate the Poincare index with a radius of 1, i.e. making use of theeight points around. This Poincare index is referred as p1. If p1 is notzero, the system can calculate another Poincare index, p2, with a radiusof 2, i.e. making use of the points on a further outside circle. If p1and p2 are the same, the point is a singular point. For a singularpoint, it is a core point if p1=1; it is a triangulation point if p1=−1;and it is a dual core point if p1=2. If p2 and p1 are different, butp2>0 and p1>0, then the point is also a dual core singular point. Thepoint is not a singular point in other situations.

Based on a normalized fingerprint image, the system can calculate ridgedirection O_(i,j) for each point (i,j) according to the followingequations:

G_(i, j)^(xx) = (G_(i, j)^(x))², G_(i, j)^(yy) = (G_(i, j)^(y))², G_(i, j)^(xy) = G_(i, j)^(x)G_(i, j)^(y)G_(i, j)^(x) = (I_(i − 1, j + 1) − I_(i − 1, j − 1)) + 4(I_(i, j + 1) − I_(i, j − 1)) + (I_(i + 1, j + 1) − I_(i + 1, j − 1))G_(i, j)^(y) = (I_(i + 1, j − 1) − I_(i − 1, j − 1)) + 4(I_(i + 1, j) − I_(i − 1, j)) + (I_(i + 1, j + 1) − I_(i − 1, j + 1))${g_{i,j}^{xx} = \frac{\sum\limits_{y = {i - w}}^{i + w}{\sum\limits_{x = {j - w}}^{j + w}G_{y,x}^{xx}}}{\left( {{2w} + 1} \right)^{2}}},{g_{i,j}^{yy} = \frac{\sum\limits_{y = {i - w}}^{i + w}{\sum\limits_{x = {j - w}}^{j + w}G_{y,x}^{yy}}}{\left( {{2w} + 1} \right)^{2}}},{g_{i,j}^{xy} = \frac{\sum\limits_{y = {i - w}}^{i + w}{\sum\limits_{x = {j - w}}^{j + w}G_{y,x}^{xy}}}{\left( {{2w} + 1} \right)^{2}}}$$O_{i,j} = {\tan^{- 1}\frac{2g_{i,j}^{xy}}{g_{i,j}^{xx} - g_{i,j}^{yy}}}$where I_(i,j) may equal R_(i,j) ^(n) in equation (2) above, w may be 15or another number based on a practical situation. The system may furthercalculate a consistency C_(i,j) of the ridge direction according to thefollowing equations:

$m_{i,j} = \sqrt{g_{i,j}^{xx} + g_{i,j}^{yy}}$$C_{i,j} = \left\{ \begin{matrix}{\frac{\sqrt{\left( {g_{i,j}^{xx} - g_{i,j}^{yy}} \right)^{2} + {4\; g_{i,j}^{{xy}\; 2}}}}{g_{i,j}^{xx} + g_{i,j}^{yy}}\ ,{{{if}\mspace{14mu} m_{i,j}} \geq {Threshold}}} \\{0,\ {otherwise}}\end{matrix} \right.$where Threshold represents a predetermined threshold, C_(i,j)=0indicates that the point falls into a background area of the fingerprintimage. Based on the calculated C_(i,j), the system can refine positionsof the singular points previous identified. For example, a refinedposition can be determined based on a minimum C_(i,j) around theoriginal position of the singular point. The system then updates theposition and direction for the singular point.

The system can enhance the normalized fingerprint image with a filterlike below:

${h\left( {x,y,\theta} \right)} = {{\rho\left( {x,y} \right)}{\exp\left( {{- \frac{\left( {{x\;\cos\;\theta} + {y\;\sin\;\theta}} \right)^{2}}{\delta_{1}^{2}}} - \frac{\left( {{x\sin\theta} - {y\cos\theta}} \right)^{2}}{\delta_{2}^{2}}} \right)}}$${\rho\left( {x,y} \right)} = \left\{ \begin{matrix}{a,{{{{if}\mspace{14mu} x^{2}} + y^{2}} \leq r^{2}}} \\{0,{otherwise}}\end{matrix} \right.$where r represents an effective radius which may be 6; a represents anamplification parameter, which may be 1024; δ₁ ² and δ₂ ² are shapeparameters for the filter, which can be 8 and 1; θ represents themodification direction of the filter. Using the above filter, the systemmay enhance the normalized fingerprint image according to the followingequation:

$\begin{matrix}{R_{i,j}^{E} = \frac{\sum\limits_{y = {i - r}}^{i + r}{\sum\limits_{x = {j - r}}^{j + r}{{h\left( {{x - i},{y = j},O_{y,x}} \right)}I_{y,x}}}}{\sum\limits_{y = {i - r}}^{i + r}{\sum\limits_{x = {j - r}}^{j + r}{h\left( {{x - i},{y - j},O_{y,x}} \right)}}}} & (3)\end{matrix}$where I_(y,x) comes from in equation (2) above; R_(i,j) ^(ε) representsthe enhanced fingerprint image. To improve calculation speed, the systemcan pre-store h for all modification directions and pre-store thedenominator in the above equation. Then, they can be retrieved directlyfor future calculations.

To calculate a ridge density map D, the system can use the followingequations:

$D_{i,j} = {\frac{\sum\limits_{y = {i - w}}^{i + w}{\sum\limits_{x = {j - w}}^{j + w}P_{y,x}}}{\sum\limits_{y = {i - w}}^{i + w}{\sum\limits_{x = {j - w}}^{j + w}C_{y,x}}} \cdot \frac{255\;{Koef}\left( O_{i,j} \right)}{KoefP}}$$P_{i,j} = \left\{ {{\begin{matrix}{1,} & \begin{matrix}{{{if}\mspace{14mu}{\sum\limits_{y = {i - w}}^{i + w}{\sum\limits_{x = {j - w}}^{j + w}I_{y,x}}}} \in \left\lbrack {{Threshold}_{bottom},{Threshold}_{top}} \right\rbrack} \\{{{and}\mspace{14mu}\left\lbrack {i,j} \right\rbrack}\mspace{14mu}{is}\mspace{14mu}{not}\mspace{14mu}{in}\mspace{14mu}{the}\mspace{14mu}{bad}\mspace{14mu}{area}}\end{matrix} \\{0,} & {otherwise}\end{matrix}C_{i,j}} = \left\{ \begin{matrix}{1,} & {\left\lbrack {i,j} \right\rbrack\mspace{14mu}{is}\mspace{14mu}{not}\mspace{14mu}{in}\mspace{14mu}{the}\mspace{14mu}{bad}\mspace{14mu}{area}} \\{0,} & {otherwise}\end{matrix} \right.} \right.$where Koef(O_(i,j)) and KoefP are parameters that may vary based ondirections; the bad area may include the background area. The system mayremove noises of the ridge density map D_(i,j) with a 33*33 filter.

The system then generate a binary image based on the enhancedfingerprint image, according to the following equation:

$R_{i,j}^{B} = \left\{ \begin{matrix}{0,} & {{{if}\mspace{14mu} I_{i,j}} < S_{i,j}} \\{255,} & {otherwise}\end{matrix} \right.$where I_(i,j) equals R_(i,j) ^(ε) in equation (3) above; S_(i,j)represents an image generated by filtering the enhance fingerprint imagewith a 33*33 filter; and R_(i,j) ^(B) represents the binary fingerprintimage.

Next, the system converts the binary image to a ridge map, where eachridge is as thin as one pixel. For example, regarding each black pixelpoint in the binary image, the system determines whether to change thepoint to white based on its surrounding eight points. If so, the blackpixel is changed to white and the process moves on to the next pixel.The system repeats this process periodically until no black point needsto be changed on the entire image. A thinned image is thus generated.

In a binary image, there can be 256 possible situations for thesurrounding eight points of a black pixel. As such, a table can beestablished to quickly determine whether to change the black pixel towhite. The table is illustrated below:

{0, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 1, 1, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 1, 0, 1, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 1, 0, 1, 1, 0, 0, 0, 1, 0, 0, 0, 0,0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0,0, 1, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0,1, 0, 0, 0, 1, 0, 1, 0, 0, 0, 0, 1, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 1,0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1,0, 1, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0,1, 0, 0, 0, 0, 0, 0, 0, 1, 1, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,1, 0, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 1, 0, 1, 0}where 1 indicates the black pixel should be changed to white, 0indicates no change is needed for the black pixel. As an example to usethe above table, a black pixel has its eight surrounding pixels listedbelow (counter-clockwise starting from the upper left corner): white,white, white, black, white, black, black, white. A corresponding indexfor the black pixel is 22, which is 00010110 in binary system (black is1 and white is 0 here). Because the 22-th number in the above table is0, there is no need to change this black pixel. In one embodiment ofusing tables like above, 0 indicates the black pixel should be changedto white, and 1 indicates no change is needed for the black pixel.

To extract minutiae accurately, the system removes noises from thefingerprint image. The system scans the thinned fingerprint image andmonitors ridges. If a distance (measured by pixels) from one end toanother of a ridge line is smaller than a predetermined threshold, thenthe system can remove this ridge as a noise ridge. Then, the systemextracts the minutiae as below. For any black point in the image, thesystem scans clockwise the surrounding eight points, starting from oneof the eight and ending with the same one. If the color changes twice,this black point is an endpoint minutia. If the color changes more thanfour times, this black point is a bifurcation point minutia. The blackpoint is not minutia in other cases.

A ridge curvature c of a minutia can be calculated based on differencesbetween the ridge direction at the minutia and the ridge directions atpoints around the minutia. Thus, the ridge curvature c of a minutia canbe calculated according to the following equation:

$\sum\limits_{\underset{{x^{2} + y^{2}} \neq 0}{{x^{2}y^{2}} < r^{2}}}{{O_{{i + x},{j + y}} - O_{i,j}}}$where r is a constant radius, which may be 10.

The system may further validate the minutiae as below. For a givenminutia, if its distance to another minutia is less than D1 (apredetermined threshold), the system deletes the given minutia. If twoendpoint minutiae have opposite directions and the distance between themis less than D2 (a predetermined threshold), the system deletes both ofthem. If an endpoint minutia and a bifurcation point minutia haveopposite directions and the distance between them is less than D3 (apredetermined threshold), the system deletes both of them. If a minutiahas a direction pointing outside and its distance to the bad area isless than D4 (a predetermined threshold), the system deletes theminutia. The values of D1, D2, D3, and D4 may be determined based onexperience.

The template generator 906 in this example generates a fingerprinttemplate based on the extracted features and sends the fingerprinttemplate to the mode-based controller 506. The fingerprint template mayinclude information about the above mentioned features: e.g. minutiae,singular points, or block direction map, etc.

FIG. 10 is a flowchart of an exemplary process performed by afingerprint image processing unit, e.g. the fingerprint image processingunit 522 in FIG. 9, according to an embodiment of the present teaching.Starting at 1002, the fingerprint image is normalized. At 1004, singularpoints are detected and refined. At 1006, average density of the ridgein the fingerprint image is calculated. At 1008, minutiae in thefingerprint image are detected and verified. At 1010, a fingerprinttemplate is generated, e.g. based on the detected singular points andminutiae and the average density of the ridge.

Based on a sample fingerprint template, the system may find a match fromthe biometric database 550 by comparing the sample fingerprint templatewith a plurality of fingerprint templates in the database. For eachcomparison between two fingerprint templates, a matching score can bedetermined to represent a similarity between the two templates. As anexample, a detailed process of comparing two fingerprint templates isdescribed below.

The system compares two fingerprint templates by comparing correspondingfeatures of the two fingerprint templates. For minutiae comparisons, thesystem groups the minutiae into minutia pairs. A minutia pair (m_(i),m_(j)) can be represented by the following parameters: d_(ij) representsthe length of a line segment connecting m_(i) and m_(j), i.e. thedistance between two minutiae; a_(i) and b_(j) represent intersectionangles between the line segment and the directions of the two minutiaerespectively; and u_(ij) represents the direction of the line segment.The system compares two minutia pairs based on these parameters. For aminutia pair, the quantities including d_(ij), a_(i), b_(j), and the twominutiae's type t, curvature c, ridge density g, are invariant totranslation or rotation. Thus, these quantities can be compared todetermine a similarity between two minutia pairs.

For a minutia pair (m_(i1), m_(j1)) from a sample fingerprint templateand another minutia pair (m_(i2), m_(j2)) from a stored fingerprinttemplate, the system can calculate their similarity according to thefollowing equation:D=cof ₁ |d _(i) ₁ _(j) ₂ −d _(i) ₂ _(j) ₂ |+cof ₂(|a _(i) ₁ −a _(i) ₂|+|b _(j) ₁ −b _(j) ₂ |)+cof ₃(|c _(i) ₁ −c _(i) ₂ |+|c _(j) ₁ −c _(j) ₂|)+cof ₄(|g _(i) ₁ −g _(i) ₂ |+|g _(j) ₁ −g _(j) ₂ |)+cof ₅(|t _(i) ₁ −t_(i) ₂ |+|t _(j) ₁ −t _(j) ₂ |)where cof₁, cof₂, cof₃, cof₄, cof₅ are positive constants that may bepre-determined based on experience; d, a, b, c, g are defined as before;t represents minutia type (1 for bifurcation point, 0 for endpoint).When D is less than a predetermined threshold ThresholdD, the systemdetermines a match between the two minutia pairs. To reduce comparisonsof minutia pairs, the system may focus on comparing minutia pairs whosed_(ij) are within a given range. To further improve speed, the systemmay order the minutia pairs in each fingerprint template according tod_(ij). Then, a minutia pair with length d may only be compared withminutia pairs having similar lengths.

After removing unmatched minutia pairs, the system can achieve a list ofmatched minutia pairs:

U = {μ_(i₁j₁, i₂j₂) = (I_(i₁j₁), I_(i₂j₂), S_(i₁j₁, i₂j₂))|D_(i₁j₁), i₂j₂ < ThresholdD}$\mspace{79mu}{S_{i_{1}j_{1}i_{2}j_{2}} = {1 - \frac{D_{{i_{1}j_{1}},{i_{2}j_{2}}}}{ThresholdD}}}$where l_(i1j1) represents two minutiae (m_(i1), m_(j1)) and theirconnections from a sample fingerprint template, l_(i2j2) represents twominutiae (m_(i2), m_(j2)) and their connections from a storedfingerprint template, D represents a distance between these two pairs ofminutiae, S represents a similarity between the two pairs of minutiae.

To calculate a similarity between the two fingerprint templates, thesystem can align the two fingerprint templates. First, the systemdetermines the rotation angle from one template to the other. Forexample, the system sets a one-dimensional array {H_(d)|0≤d<360}, itssubscript represents from a degree between 0 and 359. Each H d iscalculated as follows:

$H_{d} = {\sum\limits_{\mu_{i_{1}j_{1}i_{2}j_{2}} \in U}{S_{i_{1}j_{1}i_{2}j_{2}}\left( {{\sigma_{d}\left( {d_{i_{1}} - d_{i_{2}}} \right)} + {\sigma_{d}\left( {d_{j_{1}} - d_{j_{2}}} \right)}} \right)}}$where σ_(d) is a unit impulse function having value 1 at d and value 0at other places. Thus, {H_(d)} is a histogram representing angledifferences between corresponding minutiae from all matched minutiapairs. The maximum point in the array corresponds to the rotation angleθ according to which one template needs to be rotated to align with theother.

According to the rotation angle θ, the system rotates every angleparameters in one fingerprint template, including the minutiae angle,angle of singular points, etc. e.g. (d_(i)+θ) mod 360→d_(i).

According to {H_(d)}, for any matched minutia pair, if an angledifference between two corresponding minutiae is greater than apredetermined value, the system can remove the matched minutia pair fromthe list U.

Similarly, the system may calculate the histograms for coordinatedifferences. For example, the system sets two one-dimensional arrays{HX_(dx)} and {HY_(dy)} according to the following equations:

{HX_(dx)|−MaxDim_(x₁) ≤ dx ≤ MaxDim_(x₂)}${HX}_{dx} = {\sum\limits_{\mu_{i_{1}j_{1}i_{2}j_{2}} \in U}{S_{i_{1}j_{1}i_{2}j_{2}}\frac{{\sigma_{dx}\left( {x_{i_{1}} - x_{i_{2}}} \right)} + {\sigma_{dx}\left( {x_{i_{1}} - x_{i_{2}}} \right)}}{2}}}${HY_(dy)|−MaxDim_(y₁) ≤ dy ≤ MaxDim_(y₂)}${HY}_{dy} = {\sum\limits_{\mu_{i_{1}j_{1}i_{2}j_{2}}}{S_{i_{1}j_{1}i_{2}j_{2}}\frac{{\sigma_{dy}\left( {y_{i_{1}} - y_{i_{2}}} \right)} + {\sigma_{dy}\left( {y_{j_{1}} - y_{j_{2}}} \right)}}{2}}}$Thus, {HX_(dx)} and {HY_(dy)} are statistical histograms representingcoordinate differences (along axes x and y respectively) betweencorresponding minutiae from all matched minutia pairs; MaxDim_(x1),MaxDim_(x2), MaxDim_(y2), and MaxDim_(y2) represent maximum dimensionsalong axes x and y respectively, and may be determined based onexperience. The maximum points in the two arrays correspond to theneeded amount of shift (x₀, y₀) between the two templates, after the twotemplates are aligned by rotation. In one embodiment, MaxDim_(x1),MaxDim_(x2), MaxDim_(y2), and MaxDim_(y2) represent a same number.

According to needed amount of shift (x₀, y₀), the system shifts everyposition parameters in one fingerprint template, including minutiacoordinates, singular point coordinates, location of block directionmap, etc. Thus, the two fingerprint templates are completely aligned.

According to {HX_(dx)} and {HY_(dy)}, for any matched minutia pair, if acoordinate difference between two corresponding minutiae is greater thana predetermined value, the system can remove the matched minutia pairfrom the list U. Then, the similarities of the remaining matched minutiapairs can be added up to calculate a final similarity S_(m) for minutiacomparison.

At this point, since the two fingerprint templates are completedaligned, the system can simply calculate similarity for other features.For example, a similarity S_(s) for singular points can be achieved bycomparing each pair of singular points' position, orientation and type,and summing up the resulting similarities. A similarity S_(g) foraverage ridge density can be achieved by calculating a differencebetween two ridge densities and taking a reciprocal of the difference. Asimilarity S_(d) for block direction map can be achieved by calculatingdirection differences in the common part of the two templates' effectiveareas, and taking a reciprocal of the average cumulative differences.

Based on the above calculated similarities, the system can calculate afinal similarity between the two fingerprint templates according to thefollowing equation:S=k _(m) S _(m) +k _(s) S _(s) +k _(g) S _(g) +k _(d) S _(d)where, k_(m), k_(s), k_(g), k_(d) are weight coefficients for variousfeature similarities.

To speed up the recognition process, the system may pre-order thefingerprint template in the database based on the average ridge densityG. Then during fingerprint matching process, the system can givepriority to the fingerprint templates whose average ridge densities areclosest to that of the sample fingerprint template.

FIG. 11 illustrates an exemplary diagram of a finger vein imageprocessing unit 524 in a system for user identification, according to anembodiment of the present teaching. In one embodiment, the finger veinimage processing unit 524 may be located in theidentification/verification module 500 in FIG. 5. In another embodiment,the finger vein image processing unit 524 may be located in the 800 inFIG. 8. The finger vein image processing unit 524 in this exampleincludes a finger vein segmentation unit 1102, a finger vein imagenormalizer 1104, a finger vein extractor 1106, an image enhancement unit1108, and an image compression unit 1110.

The finger vein segmentation unit 1102 in this example segments a regionillustrating a vein from the finger vein image, based on one of the veinsegment models 1103 stored in the finger vein image processing unit 524.Each vein segment model 1103 defines a manner in which a region of veinis segmented. For example, according to one vein segment model, a regionof vein is determined by removing portions of the finger vein image whenthere is no blood vessel in the portions and the portions are located atthe outer edge of the finger vein image.

The finger vein image normalizer 1104 in this example normalizesgeometric features of the finger vein image so that the image has anormalized shape, size, and direction. For example, an affinetransformation can be used by the finger vein image normalizer 1104 totransform the finger vein image to have a normalized shape, size, anddirection. The finger vein image normalizer 1104 also normalizes graylevel of the finger vein image to bring the gray level of the image intoa normalized range. Therefore, the finger vein image has a normalizedgeometric features and gray level, same as the finger vein images storedin the database 550.

The finger vein extractor 1106 in this example extracts one or moreportions of the image representing blood vessels from the normalizedfinger vein image. For example, the finger vein extractor 1106 maydetermine, for each pixel on the normalized image, whether the pixelrepresents a portion of a blood vessel based on an identificationthreshold 1107 stored in the finger vein image processing unit 524. Inone embodiment, the identification threshold 1107 defines a minimumlevel of gray scale at which a pixel can be determined to represent ablood vessel. The identification threshold 1107 may be dynamicallymodified by an expert, or determined based on a machine learningprocess. The finger vein extractor 1106 generates a binary (e.g.black-and-white) image based on the extracted portions representingblood vessels. For example, if a pixel is determined to represent aportion of a blood vessel, the pixel is assigned a gray scale value ofcolor black; otherwise, the pixel is assigned a gray scale value ofcolor white.

The image enhancement unit 1108 in this example enhances the finger veinimage by removing image noises from the finger vein image. The imagenoises may include random variation of brightness or grayscaleinformation in the finger vein image.

The first light source 1110 in this example compresses the finger veinimage to a standard size, so that a characteristic finger vein image isgenerated, and sent to, e.g., the mode-based controller 506.

FIG. 12 is a flowchart of an exemplary process performed by a fingervein image processing unit, e.g. the finger vein image processing unit524 in FIG. 11, according to an embodiment of the present teaching.Starting at 1202, a region of vein is segmented from the finger veinimage. At 1204, geometric features of the vein are normalized. At 1206,gray scale of the image is normalized. At 1208, blood vessels areidentified from the image. At 1210, a binary finger vein image isgenerated. At 1212, noises are removed from the binary image. At 1214,the image is compressed to generate a characteristic finger vein image.

The system may compare the characteristic finger vein image with each ofa plurality of candidate characteristic finger vein images stored in adatabase. An exemplary process is described below. First, the systemdetermines a plurality of offset values. For each of the plurality ofoffset values, the system aligns the characteristic finger vein imagewith the candidate characteristic finger vein image based on the nextoffset value. For each of the plurality of offset values, the system maycompute a matching score associated with the offset value based on amatch between the characteristic finger vein image and the candidatecharacteristic finger vein image aligned using the offset value. Thenthe system selects a matching score from a plurality of matching scorescorresponding to matches between the characteristic finger vein imageand the candidate characteristic finger vein image using the pluralityof offset values. Finally, the system designates the selected matchingscore as a confidence score of the candidate characteristic finger veinimage.

FIG. 13 illustrates a detailed process for comparing two finger veinimages for user identification, according to an embodiment of thepresent teaching. As discussed above, the characteristic finger veinimage is compared with a pre-stored finger vein image in a database foruser identification or verification. In one embodiment, as shown in FIG.13, the characteristic finger vein image 1301 is compared with apre-stored finger vein image 1302 in a database for a plurality oftimes. Because both the characteristic finger vein image 1301 and thepre-stored finger vein image 1302 were processed in the same manner,they should have the same size and shape, as shown in FIG. 13.

A first comparison is performed when image 1301 is entirely overlappedby image 1302, to generate a score S1-1. A second comparison isperformed when image 1302 is shifted for a given distance (e.g. 1/20 ofthe width of image) along the x-axis, while position of image 1301 isfixed, to generate a score S2-1. A third comparison is performed whenimage 702 is shifted for an additional given distance (e.g. another 1/20of the width of image) along the x-axis, while position of image 1301 isstill fixed, to generate a score S3-1. This process goes so on and soforth for, e.g., 20 times to generate scores S1-1, S2-1 . . . S20-1.

Then, with respect to each of the above 20 steps, a comparison isperformed after image 1302 is shifted for a given distance (e.g. 1/20 ofthe height of image) along the y-axis, while position of image 1301 isfixed, to generate 20 scores S1-2, S2-2, . . . S20-2. Another 20comparisons are performed when image 1302 is shifted for an additionalgiven distance (e.g. 1/20 of the height of image) along the y-axis,while image 1301 is fixed, to generate another 20 scores S1-3, S2-3 . .. S20-3. The process goes so on and so forth until 400 scores S1-1,S2-1, . . . S20-1, S1-2, S2-2, . . . S20-2, . . . , S1-20, S2-20, . . .S20-20 are all generated.

Based on the above comparison results, a maximum score among the 400scores is selected (referred as S_(max)). The system determines thatthere is a match between the characteristic finger vein image 1301 andthe pre-stored finger vein image 1302 if S_(max) is greater than orequal to a predetermined threshold. The system determines that there isnot a match between the characteristic finger vein image 1301 and thepre-stored finger vein image 1302 if S_(max) is less than thepredetermined threshold.

FIG. 14 illustrates an exemplary diagram of anidentification/verification unit 520 in a system for useridentification, according to an embodiment of the present teaching. Inone embodiment, the identification/verification unit 520 may be locatedin the identification/verification module 500 in FIG. 5. In anotherembodiment, the identification/verification unit 520 may be located inthe 810 in FIG. 8. The identification/verification unit 520 in thisexample includes a fingerprint template retriever 1402, a fingerprintbased matching unit 1404, a finger vein image retriever 1412, a fingervein based matching unit 1414, and an identity determiner 1420.

The fingerprint based matching unit 1404 in this example receives afingerprint template and some related information from the mode-basedcontroller 506. The related information may include whether this is foruser identification without known identity or for user verification witha user-provided identity. The fingerprint based matching unit 1404 maythen inform the fingerprint template retriever 1402 to retrieve one ormore fingerprint templates from the biometric database 550.

The fingerprint template retriever 1402 in this example retrieves theone or more fingerprint templates from the biometric database 550,according to instructions received from the fingerprint based matchingunit 1404. In one example, the identification/verification unit 520works for user identification. The fingerprint based matching unit 1404may send an instruction to the fingerprint template retriever 1402 toretrieve fingerprint templates associated with identities from thebiometric database 550 according to an order based on a frequency ofmatching associated with each identity. For example, if a first identityin the biometric database 550 has been matched more frequently than asecond identity in the biometric database 550, the first identity shouldbe checked before the second identity. Accordingly, the fingerprinttemplate associated with the first identity is retrieved before thatassociated with the second identity. Alternative, the fingerprint basedmatching unit 1404 may send an instruction to the fingerprint templateretriever 1402 to retrieve fingerprint templates associated withidentities from the biometric database 550 according to an alphabeticorder of the identities.

In another example, the identification/verification unit 520 works foruser verification with a user-provided identity. The fingerprint basedmatching unit 1404 may send an instruction to the fingerprint templateretriever 1402 to retrieve the fingerprint template associated with theuser-provided identity from the biometric database 550. In one case, theuser-provided identity has multiple matches in the biometric database550. For example, the user provided a name John, and there may bemultiple identities in the biometric database 550 that include the nameJohn. In this case, the fingerprint based matching unit 1404 may send aninstruction to the fingerprint template retriever 1402 to retrieve thefingerprint templates associated with the multiple identities thatinclude the name John. If there is no match after that, the fingerprintbased matching unit 1404 may send an instruction to the fingerprinttemplate retriever 1402 to retrieve the fingerprint templates associatedwith the identities that include a name similar to John, e.g., Johnsonor Johnny.

The fingerprint based matching unit 1404 compares the fingerprinttemplate received from the mode-based controller 506 with each retrievedfingerprint template to generate a comparison result with a confidencescore. The confidence score indicates how likely the fingerprinttemplate matches the retrieved fingerprint template associated with anidentity. In one example, the confidence score is generated based on thematching score that represents a similarity between the two templates.The confidence score can be any real number or percentage numberrepresenting a degree of matching between two fingerprint templates.

If the confidence score is larger than a pre-determined threshold, theidentity is determined based on the comparison. In one example, thefingerprint based matching unit 1404 performs the comparisons until afirst identity is determined. In another example, the fingerprint basedmatching unit 1404 performs the comparisons through all the fingerprinttemplates in the biometric database 550 to determine one or moreidentities each with a confidence score higher than the pre-determinedthreshold. The fingerprint based matching unit 1404 sends the comparisonresults to the identity determiner 1420 for identity determination.

The finger vein based matching unit 1414 in this example receives acharacteristic finger vein image and some related information from themode-based controller 506. The related information may include whetherthis is for user identification without known identity or for userverification with a user-provided identity. The finger vein basedmatching unit 1414 may then inform the finger vein image retriever 1412to retrieve one or more finger vein images from the biometric database550.

The finger vein image retriever 1412 in this example retrieves the oneor more finger vein images from the biometric database 550, according toinstructions received from the finger vein based matching unit 1414. Inone example, the identification/verification unit 520 works for useridentification. The finger vein based matching unit 1414 may send aninstruction to the finger vein image retriever 1412 to retrieve fingervein images associated with identities from the biometric database 550.The finger vein image retriever 1412 can retrieve the finger vein imagesassociated with identities according to an order based on a frequency ofmatching associated with each identity. For example, if a first identityin the biometric database 550 has been matched more frequently than asecond identity in the biometric database 550, the first identity shouldbe checked before the second identity. Thus, the finger vein imageassociated with the first identity is retrieved before that associatedwith the second identity. Alternative, the finger vein based matchingunit 1414 may send an instruction to the finger vein image retriever1412 to retrieve finger vein images associated with identities from thebiometric database 550 according to an alphabetic order of theidentities.

In another example, the identification/verification unit 520 works foruser verification with a user-provided identity. The finger vein basedmatching unit 1414 may send an instruction to the finger vein imageretriever 1412 to retrieve the finger vein image associated with theuser-provided identity from the biometric database 550. In one case, theuser-provided identity has multiple matches in the biometric database550. For example, the user provided a name John, while there aremultiple identities in the biometric database 550 that include the nameJohn. The finger vein based matching unit 1414 may send an instructionto the finger vein image retriever 1412 to retrieve the finger veinimages associated with the multiple identities that include the nameJohn. If there is no match after that, the finger vein based matchingunit 1414 may send an instruction to the finger vein image retriever1412 to retrieve the finger vein images associated with the identitiesthat include a name similar to John, e.g. Johnson or Johnny.

The finger vein based matching unit 1414 compares the characteristicfinger vein image received from the mode-based controller 506 with eachretrieved finger vein image to generate a comparison result with aconfidence score. The confidence score indicates how likely thecharacteristic finger vein image matches the retrieved finger vein imageassociated with an identity. The confidence score can be any real numberor percentage number representing a degree of matching between twofinger vein images.

If the confidence score is larger than a pre-determined threshold, theidentity is determined based on the comparison. In one example, thefinger vein based matching unit 1414 performs the comparisons until afirst identity is determined. In another example, the finger vein basedmatching unit 1414 performs the comparisons through all the finger veinimages in the biometric database 550 to determine one or more identitieseach with a confidence score higher than the pre-determined threshold.The finger vein based matching unit 1414 sends the comparison results tothe identity determiner 1420 for identity determination.

In one embodiment, the fingerprint template retriever 1402 and thefinger vein image retriever 1412 can communicate and align with eachother so that a pair of fingerprint template and finger vein imageassociated with an identity is retrieved together by the fingerprinttemplate retriever 1402 and the finger vein image retriever 1412respectively.

The identity determiner 1420 in this example determines an identitybased on the comparison results from the fingerprint based matching unit1404 and the finger vein based matching unit 1414, in accordance withone of the matching models 1421 stored in theidentification/verification unit 520. Each matching model 1421 maydetermine a manner in which an identity is determined. Each matchingmodel 1421 may include a pre-determined criterion to be used forselecting one or more candidates. Different matching models can beselected in various embodiments.

In accordance with a first embodiment, an identity of a person isdetermined to be a known identity if the characteristic finger veinimage matches a finger vein image associated with the known identity inthe database and the fingerprint template matches a fingerprint templateassociated with the same known identity in the database.

If there are multiple such known identities, the identity determiner1420 may identify the person as one of such known identities based on acombination of their respective confidence scores, in accordance withdifferent matching models. For an identity having two confidence scores,the combination may be a sum of, a weighted average of, a maximum of, ora minimum of the two confidence scores. For example, there are in totalthree identities A, B, and C determined in accordance with the firstembodiment. Identity A has a confidence score 0.8 for fingerprint and aconfidence score 0.8 for finger vein. Identity B has a confidence score0.75 for fingerprint and a confidence score 0.8 for finger vein.Identity C has a confidence score 0.9 for fingerprint and a confidencescore 0.65 for finger vein. In this case, the identity determiner 1420may identify the person as: (a) identity A if determined based onhighest sum; (b) identity B if determined based on highest minimum; or(c) identity C if determined based on highest maximum.

If there are still multiple identities after considering a combinationof confidence scores, the person may be identified from such identitiesbased on either one of the confidence scores. Referring to the aboveexample, if identity C has a confidence score 0.9 for fingerprint and aconfidence score 0.7 for finger vein, identities A and C will have thesame sum (1.6) of confidence scores. In this case, besides consideringother combinations, the identity determiner 1420 may identify the personas identity A rather than identity C, because A has higher confidencescore for finger vein than C and because finger vein is more difficultto forge than fingerprint.

In accordance with a second embodiment, an identity of a person isdetermined to be a known identity if either the characteristic fingervein image matches a finger vein image associated with the knownidentity in the database or the fingerprint template matches afingerprint template associated with the same known identity in thedatabase.

If there are multiple such known identities, the identity determiner1420 may identify the person as one of such known identities based ontheir respective confidence scores. If any one of such known identitiesis in both matching results, the identity determiner 1420 may determinea combination of the confidence scores, according to different matchingmodels. For an identity having two confidence scores, the combinationmay be a sum of, a weighted average of, a maximum of, or a minimum ofthe two confidence scores. For example, there are in total threeidentities A, B, and C determined in accordance with the secondembodiment. Identity A has a confidence score 0.75 for fingerprint andno confidence score for finger vein. Identity B has no confidence scorefor fingerprint but have a confidence score 0.8 for finger vein.Identity C has a confidence score 0.65 for fingerprint and a confidencescore 0.35 for finger vein. In this case, the identity determiner 1420may identify the person as: (a) identity B if determined based onhighest maximum; or (b) identity C if determined based on highest sum.

If there are still multiple identities after considering a combinationof confidence scores, the person may be identified from such identitiesbased on either one of the confidence scores. Referring to the aboveexample, if identity C has a confidence score 0.45 for fingerprint and aconfidence score 0.35 for finger vein, identities B and C will have thesame sum (0.8) of confidence scores. In this case, besides consideringother combinations, the identity determiner 1420 may identify the personas identity B rather than identity C, because B has higher confidencescore for finger vein than C and because finger vein is more difficultto forge than fingerprint.

In accordance with a third embodiment, a person is first identified asan identity having highest confidence score for fingerprint. If thereare multiple identities having the same highest confidence score forfingerprint, the person is then identified as the identity havinghighest confidence score for finger vein among the multiple identities.

In accordance with a fourth embodiment, a person is first identified asan identity having highest confidence score for finger vein. If thereare multiple identities having the same highest confidence score forfinger vein, the person is then identified as the identity havinghighest confidence score for fingerprint among the multiple identities.

For any matching model in any embodiment, if there are multipleidentities having the same two confidence scores, the identitydeterminer 1420 may report the multiple identities together. In thissituation, the system may instruct the user to place the finger again orplace another finger for identification.

The matching model utilized by the identity determiner 1420 may bedetermined based on a tradeoff between security and efficiency. In oneexample, during business hours, lots of people want to access a buildingbelonging to a big company. Then, efficiency is more important thansecurity. Thus, the second matching model may be selected to improveefficiency. In another example, during weekends, seldom people want toaccess the building. Then, security is more important than efficiency.Thus, the first matching model may be selected to improve security.

The identity determiner 1420 then sends a matched result to theauthorization controller. The matched result may include the determinedidentity and an associated confidence score. In one embodiment, thematched result may include a decision about whether the person should beauthorized or not.

FIG. 15A is a flowchart of an exemplary process performed by anidentification/verification unit, e.g. the identification/verificationunit 520 in the FIG. 14, according to an embodiment of the presentteaching. At 1502, the fingerprint template generated by the fingerprintimage processing unit 522 is received. At 1504, fingerprint templatesare retrieved from a database. At 1506, the fingerprint template ismatched with the retrieved fingerprint templates. At 1508, theidentification/verification unit 520 determines one or more identitieseach with a confidence score for fingerprint. The process then goes to1521.

Another branch of the process includes 1512-1518, in parallel to1502-1508. At 1512, the characteristic finger vein image is received. At1514, finger vein images are retrieved from the database. At 1516, thefinger vein image is matched with the retrieved finger vein images. At1518, the identification/verification unit 520 determines one or moreidentities each with a confidence score for finger vein. The processthen goes to 1521.

At 1521, it is checked whether the same identity is found based onmatches of the fingerprint and the finger vein. If so, the process goesto 1523. If not, the process goes to 1522, where the identity of theperson cannot be recognized from the database. In that case, the personmay not be authorized.

At 1523, it is checked whether multiple identities are found at 1521. Ifnot, the process goes to 1526 where the person is identified with thefound identity, and the process ends. If multiple identities are found,the process goes to 1524, where such multiple identities are rankedbased on a combination of their respective confidence scores. Forexample, the combination may be a sum of, a weighted average of, amaximum of, or a minimum of the two confidence scores of each suchidentity. The process then proceeds to 1525.

At 1525, it is checked whether multiple top identities are found basedon ranking the combination of their respective confidence scores. Ifnot, the process goes to 1526 where the person is identified with thefound identity, i.e. the single top identity, and the process ends. Ifmultiple top identities are found at 1525, the process goes to 1528,where such multiple identities are ranked based on one of theirconfidence scores. For example, the system may rank such multipleidentities based on their respective confidence scores for finger vein,because finger vein is more difficult to forge than fingerprint. Theprocess then proceeds to 1529.

At 1529, it is checked whether multiple top identities are found basedon ranking one of their confidence scores. This may happen if multipleidentities have the exact same two confidence scores for bothfingerprint and finger vein. If so, the process goes to 1530, where thesystem can instruct the person to place the finger again or placeanother finger for identification. If not, the process goes to 1526where the person is identified with the found identity, i.e. the singletop identity, and the process ends.

FIG. 15B is a flowchart of another exemplary process performed by anidentification/verification unit, e.g. the identification/verificationunit 520 in the FIG. 14, according to another embodiment of the presentteaching. The process of 1502-1508 and the process of 1512-1518 are thesame as the corresponding portion in FIG. 15A.

Here in FIG. 15B, after 1508 and 1518, the process goes to 1541, whereit is checked whether any identity is found based on matches of thefingerprint and the finger vein. If so, the process goes to 1543. Ifnot, the process goes to 1542, where the identity of the person cannotbe recognized from the database. In that case, the person may not beauthorized.

At 1543, it is checked whether multiple identities are found at 1541. Ifnot, the process goes to 1546 where the person is identified with thefound identity, and the process ends. If multiple identities are found,the process goes to 1544, where such multiple identities are rankedbased on their respective confidence scores. If any one of such multipleidentities has two confidence scores, the system ranks the identitybased on a combination of the two confidence scores. For example, thecombination may be a sum of, a weighted average of, a maximum of, or aminimum of the two confidence scores. The process then proceeds to 1545.

At 1545, it is checked whether multiple top identities are found basedon the ranking at 1544. If not, the process goes to 1546 where theperson is identified with the found identity, i.e. the single topidentity, and the process ends. If multiple top identities are found at1545, the process goes to 1548, where such multiple identities areranked based on one of their confidence scores. For example, the systemmay rank such multiple identities based on their respective confidencescores for finger vein, because finger vein is more difficult to forgethan fingerprint. The process then proceeds to 1549.

At 1549, it is checked whether multiple top identities are found basedon ranking one of their confidence scores. This may happen if multipleidentities have the exact same two confidence scores for bothfingerprint and finger vein. This may also happen if multiple identitieshave one single match score that is a same confidence score forfingerprint or finger vein. If so, the process goes to 1550, where thesystem can instruct the person to place the finger again or placeanother finger for identification. If not, the process goes to 1546where the person is identified with the found identity, i.e. the singletop identity, and the process ends.

FIG. 16 depicts a general mobile device architecture on which thepresent teaching can be implemented. In one example, the authorizationcontroller 310-4 controls access to a mobile device 1600, including butis not limited to, a smart phone, a tablet, a music player, a handledgaming console, a GPS receiver. The mobile device 1600 in this exampleincludes one or more central processing units (CPUs) 1602, one or moregraphic processing units (GPUs) 1604, a display 1606, a memory 1608, acommunication platform 1610, such as a wireless communication module,storage 1612, and one or more input/output (I/O) devices 1614. Any othersuitable component, such as but not limited to a system bus or acontroller (not shown), may also be included in the mobile device 1600.As shown in FIG. 16, a mobile operating system 1616, e.g., iOS, Android,Windows Phone, etc., and one or more applications 1618 may be loadedinto the memory 1608 from the storage 1612 in order to be executed bythe CPU 1602. The applications 1618 may include a web browser or anyother suitable mobile search apps. Execution of the applications 1618may cause the mobile device 1400 to perform some processing as describedbefore.

In another example, an identity recognition device 1640 according tovarious embodiments in the present teaching can be integrated in themobile device 1600. In this example, a user's identity may be determinedor verified by placing a finger on the identity recognition device 1640on the mobile device 1600. The user identification in this example maybe used for a user to obtain access to either the mobile device 1600 oranother device, e.g. a car or a controller at a door that cancommunicate with the mobile device 1600.

To implement the present teaching, computer hardware platforms may beused as the hardware platform(s) for one or more of the elementsdescribed herein. The hardware elements, operating systems, andprogramming languages of such computers are conventional in nature, andit is presumed that those skilled in the art are adequately familiartherewith to adapt those technologies to implement the processingessentially as described herein. A computer with user interface elementsmay be used to implement a personal computer (PC) or other type of workstation or terminal device, although a computer may also act as a serverif appropriately programmed. It is believed that those skilled in theart are familiar with the structure, programming, and general operationof such computer equipment and as a result the drawings should beself-explanatory.

FIG. 17 depicts a general computer architecture on which the presentteaching can be implemented and has a functional block diagramillustration of a computer hardware platform that includes userinterface elements. The computer may be a general-purpose computer or aspecial purpose computer. This computer 1700 can be used to implementany components of the user identification architecture as describedherein. Different components of the system, e.g., as depicted in FIGS. 1and 2, can all be implemented on one or more computers such as computer1700, via its hardware, software program, firmware, or a combinationthereof. Although only one such computer is shown, for convenience, thecomputer functions relating to user identification may be implemented ina distributed fashion on a number of similar platforms, to distributethe processing load.

The computer 1700, for example, includes COM ports 1702 connected to andfrom a network connected thereto to facilitate data communications. Thecomputer 1700 also includes a CPU 1704, in the form of one or moreprocessors, for executing program instructions. The exemplary computerplatform includes an internal communication bus 1706, program storageand data storage of different forms, e.g., disk 1708, read only memory(ROM) 1710, or random access memory (RAM) 1712, for various data filesto be processed and/or communicated by the computer, as well as possiblyprogram instructions to be executed by the CPU 1704. The computer 1700also includes an I/O component 1714, supporting input/output flowsbetween the computer and other components therein such as user interfaceelements 1716. The computer 1700 may also receive programming and datavia network communications.

Hence, aspects of the method of user identification, as outlined above,may be embodied in programming. Program aspects of the technology may bethought of as “products” or “articles of manufacture” typically in theform of executable code and/or associated data that is carried on orembodied in a type of machine readable medium. Tangible non-transitory“storage” type media include any or all of the memory or other storagefor the computers, processors or the like, or associated modulesthereof, such as various semiconductor memories, tape drives, diskdrives and the like, which may provide storage at any time for thesoftware programming.

All or portions of the software may at times be communicated through anetwork such as the Internet or various other telecommunicationnetworks. Such communications, for example, may enable loading of thesoftware from one computer or processor into another. Thus, another typeof media that may bear the software elements includes optical,electrical, and electromagnetic waves, such as used across physicalinterfaces between local devices, through wired and optical landlinenetworks and over various air-links. The physical elements that carrysuch waves, such as wired or wireless links, optical links or the like,also may be considered as media bearing the software. As used herein,unless restricted to tangible “storage” media, terms such as computer ormachine “readable medium” refer to any medium that participates inproviding instructions to a processor for execution.

Hence, a machine readable medium may take many forms, including but notlimited to, a tangible storage medium, a carrier wave medium or physicaltransmission medium. Non-volatile storage media include, for example,optical or magnetic disks, such as any of the storage devices in anycomputer(s) or the like, which may be used to implement the system orany of its components as shown in the drawings. Volatile storage mediainclude dynamic memory, such as a main memory of such a computerplatform. Tangible transmission media include coaxial cables; copperwire and fiber optics, including the wires that form a bus within acomputer system. Carrier-wave transmission media can take the form ofelectric or electromagnetic signals, or acoustic or light waves such asthose generated during radio frequency (RF) and infrared (IR) datacommunications. Common forms of computer-readable media thereforeinclude for example: a floppy disk, a flexible disk, hard disk, magnetictape, any other magnetic medium, a CD-ROM, DVD or DVD-ROM, any otheroptical medium, punch cards paper tape, any other physical storagemedium with patterns of holes, a RAM, a PROM and EPROM, a FLASH-EPROM,any other memory chip or cartridge, a carrier wave transporting data orinstructions, cables or links transporting such a carrier wave, or anyother medium from which a computer can read programming code and/ordata. Many of these forms of computer readable media may be involved incarrying one or more sequences of one or more instructions to aprocessor for execution.

FIG. 18 depicts an exemplary manner in which the present teaching can beimplemented on a general computer. In this example, an identityrecognition device 1840 according to various embodiments in the presentteaching can be integrated in a laptop 1800. In this example, a user'sidentity may be determined or verified by placing a finger on theidentity recognition device 1840 on the laptop 1800. The useridentification in this example may be used for a user to obtain accessto either the laptop 1800 or another device, e.g. a car or a controllerat a door that can communicate with the laptop 1800.

Those skilled in the art will recognize that the present teachings areamenable to a variety of modifications and/or enhancements. For example,although the implementation of various components described above may beembodied in a hardware device, it can also be implemented as a softwareonly solution—e.g., an installation on an existing server. In addition,the units of the host and the client nodes as disclosed herein can beimplemented as a firmware, firmware/software combination,firmware/hardware combination, or a hardware/firmware/softwarecombination.

While the foregoing has described what are considered to be the bestmode and/or other examples, it is understood that various modificationsmay be made therein and that the subject matter disclosed herein may beimplemented in various forms and examples, and that the teachings may beapplied in numerous applications, only some of which have been describedherein. It is intended by the following claims to claim any and allapplications, modifications and variations that fall within the truescope of the present teachings.

What is claimed:
 1. A system for recognizing a person, comprising: ahousing including a surface; a presence detecting sensor disposedbeneath the surface and configured for sensing presence of a fingerbeing placed on the surface; a first light source disposed beneath thesurface and configured to emit, in response to the finger being sensed,a radiation to the finger, resulting in finger reflected radiation; amagnifying lens configured for magnifying the finger reflectedradiation, resulting in magnified finger reflected radiation; a mirrorconfigured for reflecting the magnified finger reflected radiation,resulting in mirror reflected radiation; a minifying lens configured forminifying the mirror reflected radiation, resulting in minifiedreflected radiation; a first sensor configured for acquiring an image ofa fingerprint of the person based on sensing the minified reflectedradiation and transforming the minified reflected radiation intoelectrical signals to acquire the image; and an identification moduleimplemented on at least one processor and configured for recognizing theperson based on the image.
 2. The system of claim 1, further comprising:a prism disposed between the first light source and the surface, whereinthe radiation is transmitted through the prism and reflected by thefinger.
 3. The system of claim 1, further comprising: a second lightsource including a pair of opposing and parallel light plates anddisposed above the surface of the housing, wherein the finger is placedbetween the light plates; and a second sensor configured for acquiringan image of a finger vein of the person based on the second lightsource.
 4. The system of claim 3, wherein the identification module isfurther configured to recognize the person based on the image of thefinger vein of the person.
 5. The system of claim 3, wherein the firstsensor and the second sensor are disposed beneath the surface of ahousing of the system.
 6. The system of claim 1, wherein theidentification module comprises: a fingerprint image processing unit,implemented on at least one processor, configured for generating afingerprint template based on the image of the fingerprint of theperson; a finger vein image processing unit, implemented on at least oneprocessor, configured for generating a characteristic finger vein imagebased on the image of the finger vein of the person; and anidentification/verification unit, implemented on at least one processor,configured for recognizing the person based on the fingerprint templateand the characteristic finger vein image.
 7. The system of claim 6,wherein the identification/verification unit comprises: a fingerprintbased matching unit, implemented on at least one processor, configuredfor comparing the fingerprint template with a plurality of storedfingerprint templates to identify a first set of candidates; and afinger vein based matching unit, implemented on at least one processor,configured for comparing the characteristic finger vein image with eachof a plurality of stored characteristic finger vein images to identify asecond set of candidates.
 8. The system of claim 7, wherein: the firstset of candidates includes one or more candidates each of which isassociated with a confidence score; the second set of candidatesincludes one or more candidates each of which is associated with aconfidence score; and the person is recognized based on the confidencescores.
 9. The system of claim 8, wherein: the person is recognized as acommon candidate in the first and second sets of candidates; and ifthere are multiple common candidates in the first and second sets ofcandidates, the person is recognized based on a combination of theconfidence scores for each of the common candidates.
 10. The system ofclaim 9, wherein the combination of the confidence scores includes atleast one of: a sum of, a weighted average of, a maximum of, and aminimum of the confidence scores.
 11. The system of claim 6, wherein thefinger vein image processing unit comprises: a finger vein segmentationunit configured for segmenting a region in the finger vein image wherethe finger vein is present to generate a segmented image; a finger veinimage normalizer configured for normalizing the segmented image togenerate a normalized image; a finger vein extractor configured foridentifying blood vessels based on the normalized image to generate abinary image; an image enhancement unit configured for enhancing thebinary image to generate an enhanced image; and an image compressionunit configured for compressing the enhanced image to generate thecharacteristic finger vein image.
 12. The system of claim 11, whereinthe finger vein image normalizer is configured for normalizing at leastone of shape, size, direction, and gray level of the segmented image.13. The system of claim 11, wherein the finger vein extractor isconfigured for determining, for each pixel in the normalized image,whether the pixel represents a portion of a blood vessel based on apredetermined threshold.
 14. The system of claim 7, wherein comparingthe characteristic finger vein image with each stored characteristicfinger vein image comprises: for each offset value of a plurality ofoffset values, aligning the characteristic finger vein image with thecandidate characteristic finger vein image based on a next offset value;computing a matching score associated with the offset value based on amatch between the characteristic finger vein image and the candidatecharacteristic finger vein image aligned using the offset value;selecting a matching score from a plurality of matching scorescorresponding to matches between the characteristic finger vein imageand the candidate characteristic finger vein image using the pluralityof offset values; and designating the selected matching score as aconfidence score of the candidate characteristic finger vein image. 15.The system of claim 1, further comprising: another presence detectingsensor disposed beneath the surface at a second end of the housing, andconfigured for sensing presence of a second portion of the finger, thesecond end being opposite the first end of the housing.